Privacy Policy

This privacy policy explains what personal data aurumx.nl collects and why. Data controller: defardel — AurumX is a trade name of defardel — Oude Singel 2A, 3421 EE Oudewater, the Netherlands · KVK 92056652 · info@aurumx.nl.

What I collect and why

• Orders: name, address, e-mail, phone and order details — to process and deliver your order (contract performance) and for my tax administration (legal obligation, kept 7 years).
• Buyback requests: the above, plus your IBAN and a copy of your identity document. The ID copy is required by the Dutch anti-money-laundering act (Wwft) and is stored securely, used only for identification, and retained for the statutory Wwft period (5 years after the transaction).
• Accounts: if you create an account, your login and order history, until you delete the account.
• Contact: messages you send me, kept as long as needed to handle your question.
• Site statistics: anonymised, aggregated product-view counts. Visitors are counted with a one-way hashed identifier; no profile is built and view data is deleted after 90 days.

Cookies

I use functional cookies that are necessary for the shop to work (shopping cart, session, cookie preference). Non-essential cookies are only set after your consent via the cookie banner.

Who receives your data

Your data is shared only with parties needed to run the shop: my hosting provider, my payment provider (to process your payment), and the shipping carrier (name and delivery address only). I never sell personal data. All processing takes place within the EU/EEA or under EU-approved safeguards.

Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, or object to processing, by e-mailing info@aurumx.nl. Statutory retention duties (tax, Wwft) can limit deletion. You can lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Security

The site uses TLS encryption; identity documents are stored outside the public web root with access restricted to authorised staff. Payment data is handled entirely by the payment provider — I never see your card or bank credentials.

Last updated: 31 August 2026.